Exchange Server Forums

"You do not have permission to perform this action" - UPDATED:- FIXED

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Outlook Web Access >> "You do not have permission to perform this action" - UPDATED:- FIXED

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

"You do not have permission to perform this action... - 24.Oct.2007 5:08:11 AM

Danny7496

Posts: 3
Joined: 24.Oct.2007
Status: offline

Hi all, long time reader first time poster here.

I have just installed Exchange 2007 onto a new server within our company with the help of some guides I found on this website. I have successfully got the server co-existing with our old mail server (Exchange 2000), mail flows between the two server and the public folders have replicated. I even have mail flowing externally. The one problem I have is getting Outlook Web Access working. All the users in ADUC have the inheritable permissions ticked (with the exception of administrators). Our Firewall is configured to let the required traffic through, I feel that the users are getting to the Default Web Site in IIS because if I change security permissions these changes are reflected in the logon box that the users are presented with. I tried to delete the OWA directories and recreate them but when I go into IIS Metebase Explorer there is no DS2MB Key under the LM Key. I am completely stuck and require help on this matter. one thing that might be worth adding is that if a users uses Firefox to access OWA it does get to the mailbox but it doesnt display correctly. Below is the error that is generated using IE7:-

You do not have permission to perform this action.

Request
Url: http://exchange.mycompany.co.uk:80/OWA/forms/premium/StartPage.aspx
User host address: 192.168.1.104
User: Danny Sisson
EX Address: /o=mycompany/ou=First Administrative Group/cn=Recipients/cn=DSisson
SMTP Address: Danny.Sisson@mycompany.co.uk
OWA version: 8.0.685.24
Mailbox server: exchange.mycompany.co.uk
Exception
Exception type: Microsoft.Exchange.Data.Storage.AccessDeniedException
Exception message: An exception occurred while reading the MDB event history.
Call stack
Microsoft.Exchange.Data.Storage.EventPump.ReadLastEventWatermark()
Microsoft.Exchange.Data.Storage.EventPump..ctor(EventPumpManager eventPumpManager, String server, Guid mdbGuid)
Microsoft.Exchange.Data.Storage.EventPumpManager.GetEventPump(ExchangePrincipal mailboxOwner)
Microsoft.Exchange.Data.Storage.EventPumpManager.RegisterEventSink(ExchangePrincipal mailboxOwner, EventSink eventSink)
Microsoft.Exchange.Data.Storage.EventSink.InternalCreateEventSink[T](MailboxSession session, EventWatermark watermark, ConstructSinkDelegate`1 constructEventSinkDelegate)
Microsoft.Exchange.Clients.Owa.Core.OwaFolderCountAdvisor..ctor(UserContext userContext, StoreObjectId folderId, EventObjectType objectType, EventType eventType)
Microsoft.Exchange.Clients.Owa.Core.OwaNotificationManager.CreateOwaFolderCountAdvisor(UserContext userContext, StoreObjectId folderId, EventObjectType objectType, EventType eventType)
Microsoft.Exchange.Clients.Owa.Premium.StartPage.OnInit(EventArgs e)
System.Web.UI.Control.InitRecursive(Control namingContainer)
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Inner Exception
Exception type: Microsoft.Mapi.MapiExceptionNoAccess
Exception message: MapiExceptionNoAccess: Unable to read the last event. (hr=0x80070005, ec=-2147024891) Diagnostic context: Lid: 1494 ---- Remote Context Beg ---- Lid: 1091 StoreEc: 0x80070005 Lid: 20057 StoreEc: 0x80070005 Lid: 1750 ---- Remote Context End ---- Lid: 28777 StoreEc: 0x80070005 Lid: 20098 Lid: 20585 StoreEc: 0x80070005
Call stack
Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, Object objLastErrorInfo)
Microsoft.Mapi.MapiEventManager.ReadLastEvent()
Microsoft.Exchange.Data.Storage.EventPump.ReadLastEventWatermark()

If someone can help me it really would be appreciated.

Thankyou.

Danny.

**********************

I thought I would post the fix to this problem as I have now, after 4 days fixed my OWA problem. Here's how:-

* Open IIS
* Click Application Pools
* Right Click DeafultAppPool
* Select Properties
* Click Identify Tab
* Make Sure Security Account is set to Predefined - Local System

Mine was set to "Network Service" and this was stopping OWA from working, once I changed this option to Local system I right clicked DefaultAppPool, stopped it and then started it again.

All my other AppPool services are also set to "Local System" by default, it might be worth checking yours are to.

I hope this helps someone else in the future as it has caused me no end of headached.

Danny.

< Message edited by Danny7496 -- 24.Oct.2007 9:08:37 AM >

Post #: 1

Featured Links*

RE: "You do not have permission to perform this ac... - 12.Feb.2008 3:46:00 AM

yamensbs

Posts: 1
Joined: 12.Feb.2008
Status: offline

Hello Everyone,

I am having a very similar problem. and have checked the Application Pools and they were all set to local System. But the exception in the error was:

"Cannot get ID from name"

Can anyone help out plz?

(in reply to Danny7496)

Post #: 2

RE: "You do not have permission to perform this ac... - 11.Mar.2008 6:20:35 AM

JonW

Posts: 1
Joined: 11.Mar.2008
Status: offline

I seem to have this problem with a single user only. Any ideas?

(in reply to yamensbs)

Post #: 3

RE: "You do not have permission to perform this ac... - 23.Jun.2008 5:31:05 AM

zebedee

Posts: 14
Joined: 12.Dec.2007
Status: offline

I have this issue on OWA 2007 - but only when I select the full OWA - not the basic, basic is fine.

Just get the message:

You do not have permission to perform this action

Tried change the DefaultAppPool but no joy

(in reply to JonW)

Post #: 4

RE: "You do not have permission to perform this ac... - 23.Jun.2008 8:37:59 AM

zebedee

Posts: 14
Joined: 12.Dec.2007
Status: offline

Okay - I've made some progress on this but still stuck.

I did a get-CASMailbox <Mailboxname>|fl command to have a look at the OWAPreimumClientEnabled field which is blank - in fact all the OWA fields are blank but this is to be expected, apparantely.

If I change it to true (it resets all the others to false) but then I can get in to OWA Premium.

This leads me back to segementation on the OWA site not working properly so I disable Premium and again can now get in on light mode.

So I switch Premium back on - and I am back to the same permission denied error - this is after a reinstall of Exchange and IIS.

Short of reinstalling the entire server - I am stuck

(in reply to zebedee)

Post #: 5